Prosper Data Privacy and HIPAA Overview for Clients

We know that privacy and data security are top concerns, and we want to be transparent about how we protect your information. At Prosper Health, we follow strict HIPAA guidelines to ensure your data is secure, confidential, and only shared when absolutely necessary. We do not sell or share your data for commercial or political purposes, and only authorized professionals involved in your care have access to your records.

‍

There are very limited situations where we may be required to share information, such as legally valid court orders or if there is an immediate safety risk. If you use insurance, we share only the minimum necessary details—such as diagnosis and billing codes—to process claims, and insurers are also required to protect your data under HIPAA.

‍

To be clear:

• We do not share your session notes, full medical history, or sensitive personal information with any government agency unless required by law.
• We only share the minimum necessary data with insurance companies to process insurance claims.
• We follow strict privacy policies and, in the rare event that someone other than your insurance requests information, we will notify you whenever possible.

‍

Your privacy is essential to us, and we are committed to protecting your data with the highest security standards. If you have any concerns or questions, please don’t hesitate to reach out.

Prosper Health does not share your data with anyone unless it is absolutely necessary to your care or legally required. We are fully compliant with the Health Insurance Portability and Accountability Act (HIPAA), which sets strict rules on how healthcare data is handled.

‍

Under HIPAA, we are required to share certain health information in very limited circumstances:

‍

• If you give us explicit permission – We will only share your records with another provider, entity, or individual if you request and authorize it.
• For treatment and care coordination – If necessary, we may share relevant information with your other healthcare providers to support your care. We will never do this without your consent.
• Your insurance company - If you are using insurance to pay for services, we submit certain information to your insurer for claims processing. While we do share limited necessary information with insurance (more below), insurance companies must also comply with HIPAA regulations.
• To comply with a legally valid request – This includes:
  • Court orders – If a court issues a legally binding order, we may be required to share specific information. However, we will only disclose the minimum necessary data and will notify you if legally allowed.
  • Serious safety risks – If there is an imminent risk of harm to you or someone else, we may be required to share limited information with emergency responders to ensure safety.

Outside of these specific legal situations, your information remains fully private and secure.

If you are using insurance to pay for services, we must submit certain information to your insurer for claims processing. This typically includes:

• Diagnosis codes – These are required by insurance to determine coverage.
• Service details – This includes the type of service (e.g., therapy session, evaluation) and session dates.
• Billing codes (CPT codes) – These codes indicate the type of service provided and the time spent.
• Minimal provider notes (only when required by the insurer) – In some cases, insurers may request brief documentation to verify the necessity of care. However, we do not share full session notes or detailed records unless explicitly required and authorized by you.

‍

Importantly, insurance companies must also comply with HIPAA. If you have concerns about how your insurance company uses your data, we recommend reviewing their privacy policy.

‍

At Prosper Health, we use industry-leading security practices to keep your data safe. This includes:

• HIPAA compliance – We follow strict federal guidelines to protect your health information.
• Encryption – Your data is encrypted both in transit and at rest, meaning it’s secure whether being sent or stored.
• Limited access – Only authorized healthcare professionals involved in your care can access your records.
• Secure storage – We use secure cloud-based systems that are regularly audited to ensure compliance with healthcare privacy laws. We continuously monitor and update our security protocols to keep your information protected against unauthorized access.

‍

Your therapy records and diagnosis information are private and protected by HIPAA, which strictly limits who can access them. The government—including agencies like the NIH—cannot access your identifiable health information without your explicit consent, except in extremely rare and specific legal situations (such as a valid court order or a law passed by Congress).

‍

At Prosper Health, we do not share your records with government agencies, law enforcement, or political entities unless we are legally required to do so—and only after all privacy safeguards have been reviewed. To date, Prosper Health has never shared any client records with government entities.

Yes, under HIPAA, you have the right to request and receive a copy of your medical records, including session notes, diagnosis information, and most other data we maintain about your care (outside of a few, select assessment forms) If you’d like to request your records, simply reach out to our support team, and we’ll guide you through the process. There may be a brief processing time, but we will ensure you receive your records in a secure and timely manner.